Monday, November 4, 2013

Full control is a set of permissions that I see granted quite a bit, perhaps more frequently than it needs to be. For example, I see quite a large number of customers with the full control NTFS permission for each user set on their network home folders, or a group with full control to their departmental network shares. I'm a firm believer of using modify permission instead of full control in these situations and this is why:

I purposely do not name my employer here and any reference to it is stripped from scripts/code before it is posted. This blog and all related links and profiles are entirely my own. My opinions, beliefs, rants, etc are completely mine and are not indicative of the beliefs of my employer.